Vulnerability in Dahuasecurity Ipc-Hdbw1320e-W
CVE-2019-9682
Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker can monitor the device network to intercept network packets to attack the device. So it is recommended that the user disable this login method.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.009 (56.9th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 57th percentile — 56.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.009 · newest: 0.009 · change: 0.000
Affected products
- Dahuasecurity Ipc-Hdbw1320e-W
- Dahuasecurity Ipc-Hdbw1320e-W Firmware
- Dahuasecurity Ipc-Hx2xxx
- Dahuasecurity Ipc-Hx2xxx Firmware
- Dahuasecurity Ipc-Hx5842h
- Dahuasecurity Ipc-Hx5842h Firmware
- Dahuasecurity Ipc-Hx7842h
- Dahuasecurity Ipc-Hx7842h Firmware
- Dahuasecurity Ipc-Hxxx5x4x
- Dahuasecurity Ipc-Hxxx5x4x Firmware
Weakness classification (CWE)
References
- www.dahuasecurity.com/support/cybersecurity/details/767 (Vendor Advisory)
Frequently asked questions
- What is CVE-2019-9682?
- CVE-2019-9682 is a high-severity vulnerability in Dahuasecurity Ipc-Hdbw1320e-W, classified under Incorrect Default Permissions. CVSS score: 8.1/10. Published 2020-05-13.
- How severe is CVE-2019-9682?
- High severity. CVSS v3 base score is 8.1 out of 10.